7.5

CVE-2011-1128

The loadUserSettings function in Load.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly handle invalid login attempts, which might make it easier for remote attackers to obtain access or cause a denial of service via a brute-force attack.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SimplemachinesSmf Version <= 1.1.12
SimplemachinesSmf Version1.0
SimplemachinesSmf Version1.0 Updatebeta4
SimplemachinesSmf Version1.0 Updatebeta4.1
SimplemachinesSmf Version1.0 Updatebeta5
SimplemachinesSmf Version1.0 Updatebeta6
SimplemachinesSmf Version1.0 Updaterc1
SimplemachinesSmf Version1.0 Updaterc2
SimplemachinesSmf Version1.0.1
SimplemachinesSmf Version1.0.2
SimplemachinesSmf Version1.0.3
SimplemachinesSmf Version1.0.4
SimplemachinesSmf Version1.0.5
SimplemachinesSmf Version1.0.6
SimplemachinesSmf Version1.0.7
SimplemachinesSmf Version1.0.8
SimplemachinesSmf Version1.0.9
SimplemachinesSmf Version1.0.10
SimplemachinesSmf Version1.0.12
SimplemachinesSmf Version1.0.13
SimplemachinesSmf Version1.0.14
SimplemachinesSmf Version1.0.15
SimplemachinesSmf Version1.0.16
SimplemachinesSmf Version1.0.17
SimplemachinesSmf Version1.0.18
SimplemachinesSmf Version1.0.19
SimplemachinesSmf Version1.0.20
SimplemachinesSmf Version1.0.21
SimplemachinesSmf Version1.1
SimplemachinesSmf Version1.1 Updatebeta1
SimplemachinesSmf Version1.1 Updatebeta2
SimplemachinesSmf Version1.1 Updatebeta3
SimplemachinesSmf Version1.1 Updatebeta4
SimplemachinesSmf Version1.1 Updaterc1
SimplemachinesSmf Version1.1 Updaterc2
SimplemachinesSmf Version1.1 Updaterc3
SimplemachinesSmf Version1.1.1
SimplemachinesSmf Version1.1.2
SimplemachinesSmf Version1.1.3
SimplemachinesSmf Version1.1.4
SimplemachinesSmf Version1.1.5
SimplemachinesSmf Version1.1.6
SimplemachinesSmf Version1.1.7
SimplemachinesSmf Version1.1.8
SimplemachinesSmf Version1.1.9
SimplemachinesSmf Version1.1.10
SimplemachinesSmf Version1.1.11
SimplemachinesSmf Version2.0 Updatebeta1
SimplemachinesSmf Version2.0 Updatebeta2
SimplemachinesSmf Version2.0 Updatebeta2.1
SimplemachinesSmf Version2.0 Updatebeta3
SimplemachinesSmf Version2.0 Updatebeta3.1
SimplemachinesSmf Version2.0 Updatebeta4
SimplemachinesSmf Version2.0 Updaterc1
SimplemachinesSmf Version2.0 Updaterc2
SimplemachinesSmf Version2.0 Updaterc3
SimplemachinesSmf Version2.0 Updaterc4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.7% 0.711
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.